Deployment Architecture

Restart LWF's to use new app deployed from deployment server

chicodeme
Communicator

The deployment server deploys the apps just fine using the splunk reload deploy-server command. But once the app is on the LWF's, are you required to restart the LWF in order to get the app to start working?

Maybe it depends on the app, so lets pick the unix app(Splunk for Unix and Linux) from splunkbase.

Are you required to restart the LWF's as of version 4.1.6 in order for the deployed app to become active? Active.. meaning collecting data and sending it to the indexer.

I'm not on the recently released 4.1.7 yet.

Tags (1)
0 Karma
2 Solutions

David
Splunk Employee
Splunk Employee

I believe the LWF is going to need a restart in order for it to pick up any new inputs. You should be able to do that with:

[global]
restartSplunkd=true 

in your serverclass.conf. (Or you can put it under any particular server stanza, if desired.)

Does that work for you?

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

Most app configurations that you would deploy to a LWF will require a restart of the LWF. (This is not so for, say, most search head configurations) If you add restartSplunkd to the app stanza, e.g.:

[serverClass:myclass:app:myspecialapp]
whitelist.0=server1
restartSplunkd=true

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

Most app configurations that you would deploy to a LWF will require a restart of the LWF. (This is not so for, say, most search head configurations) If you add restartSplunkd to the app stanza, e.g.:

[serverClass:myclass:app:myspecialapp]
whitelist.0=server1
restartSplunkd=true

chicodeme
Communicator

I didn't know of that option. Thanks I will try it out.

0 Karma

David
Splunk Employee
Splunk Employee

I believe the LWF is going to need a restart in order for it to pick up any new inputs. You should be able to do that with:

[global]
restartSplunkd=true 

in your serverclass.conf. (Or you can put it under any particular server stanza, if desired.)

Does that work for you?

chicodeme
Communicator

I didn't know of that option. Thanks I will try it out.

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...